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This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 




1 1. (currently amended) A method Method with by which a 

2 mobile subscriber with a WAP- enabled terminal can access a WEB 

3 or WAP server, comprising the steps of: 

4 wherein said terminal sends sending a request for said 

5 server to a WAP gateway, wherein the security 

6 encryption in the air wireless interface between 

7 said WAP-enabled terminal and said gateway is based 

8 on WTLS (Wireless Transport Layer Security) , and 

9 wherein the security an encryption protocol used by 

10 said server is based on the SSL and/or TLS security 

1 1 protocol [ [ , ] ] ; and 

12 wherein the conversion converting between WTLS and SSL 

13 and/or TLS is effected in a secured domain of said 

14 server administrated by an administrator, aad 

15 wherein the WTLS encrypted packets sent by said 

16 terminal are routed by said gateway to said secured 

17 domain[[,]] without said gateway decrypting all of 

18 the encrypted packets transported during a session. 

1 2. (currently amended) Method according to claim 1, 

2 wherein said gateway -HH- routes said packets to a proxy in 

3 said secured domain, said proxy using at least one protocol 

4 layer of the WAP protocol . 

1 3. (currently amended) Method according to claim 2, 

2 wherein said packets are routed according to the URL 

3 and/or the domain name of the requested page in said gateway. 

1 4. (currently amended) Method according to claim 2, 

2 wherein said packets are routed according to the port number 
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1 5. (currently amended) Method according to claim 4, 

2 wherein the said encrypted packets are routed according to 

3 different port numbers to different secured domains. 

1 6. (currently amended) Method according to claim 4, 

2 wherein said port numbers are extracted in an application 

3 layer of said gateway from the URI and/ or URL of the requested 

4 page . 

1 7. (original) Method according to claim 6, wherein 

2 said port number is extracted from only a restricted number of 

3 packets during a session, and wherein the routing of at least 

4 one of the following packets depends on this extracted port 

5 number . 

1 8- (currently amended) Method according to claim 7, 

2 wherein a proxy server in said secured domain extracts the UR£ 

3 URL and/or the port number of the received packets and wherein 

4 the proxy server sends back a command to said gateway if it 

5 receives a packet with a different URI URL and/or port number. 



1 9. (currently amended) Method according to claim 4, 

2 wherein said port number is extracted from said URI and/ or URL 

3 of the required web page in said terminal . 

1 10. (currently amended) Method according to claim 9, 

2 wherein said port number is extracted by a browser from said 

3 URI and/or URL of the required web page . 

1 11. (original) Method according to claim 8, wherein 

2 the browser in said terminal only copies said port number in 

3 said packets if an end-to-end secured connection is requested. 



Amendments to the Claims 



Page 3 of 14 



Appl. No. 09/592,916 
Amdt. Dated March 23, 2004 
Reply to Office action of December 9, 2003 



1 12. (original) Method according to claim 3, wherein 

2 said packets in said gateway are routed to a secured domain if 

3 said port number is comprised in a predefined range. 

1 13. (currently amended) Method according to claim 3, 

2 wherein said gateway ( 3 ) sends a redirect command to said 

3 terminal if an end-to-end secured connection is requested. 

1 14. (currently amended) Method according to the 

2 preceding clai m 13 , wherein said redirect command is time- 

3 limited. 

1 15. (currently amended) Method according to claim 13, 

2 wherein a proxy server in said secured domain extracts the URI 

3 URL and/or the port number of the received packets and sends a 

4 redirect command back to said terminal as soon as the session 

5 is to be routed to said gateway. 

1 16. (original) Method according to claim 13, wherein 

2 said redirect command contains a forwarding address which is 

3 extracted from a document made accessible by said WEB or WAP 

4 server. 

1 17. (original) Method according to claim 13, wherein 

2 said redirect command contains a document which includes the 

3 forwarding address. 

1 18. (currently amended) A Method with method by which a 

2 mobile user with a WAP-enabled terminal can access a WEB or 

3 WAP server, said method comprising the steps of: 

4 said terminal sending a request for said server to a WAP 

5 gateway, wherein a browser in said terminal extracts 
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6 the port number of the demanded WEB or WAP page and 

7 copies it to packets sent to said gateway [[,]] ; and 

8 and wherein routing said packets arc routed in said 

9 gateway according to this port number. 

1 19. (currently amended) A Gateway gateway comprising : 

2 means for receiving able to receive WTLS scccurcd 

3 datagrams packets encrypted according to the WTLS 

4 protocol from WAP-enabled terminals_£_ and to convert 

5 them 

6 means for converting said packets into SSL- secured 

7 encrypted requestsj_ [ [ , ] ] and 

8 means for transmitting said SSL- requests to a receiving 

9 server, wherein said gateway can recognize WTLS- 

10 encrypted packets datagrams that are to be sent on 

11 transparently and routes can convert said WTLS- 

12 encrypted these datagrams packets into SSL-encrypted 

13 request without decrypting the information contained 

14 in said WTLS -encrypted packets them . 

1 20. (currently amended) Gateway according to the 

2 preceding claim 19, wherein said WTLS - encrypted packets are 

3 routed according to the URi URL and/or the domain name of the 

4 requested page. 

1 21. (currently amended) Gateway according to the claim 

2 19, wherein said WTLS -encrypted packets are routed according 

3 to the port number of the requested page. 

1 22. (currently amended) Gateway according to tbe 

2 preceding clai m 21 , 

3 wherein said WTLS -encrypted packets are routed to 

4 different secured domains according to different 

5 port numbers . 
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1 23. (currently amended) Gateway according to claim 21, 

2 wherein said port number is extracted from the URI and/ or URL 

3 of the requested page in an application layer of said gateway, 

1 24. (currently amended) Gateway according to claim 21, 

2 wherein said port number is extracted during a session only 

3 from a restricted number of WTLS- encrypted packets, 

4 and wherein the routing of at least one following WTLS- 

5 encrypted packet depends on said extracted port 

6 number . 

1 25. (currently amended) Method with A method by which a 

2 terminal can access a server , said method comprising the steps 

3 of ; [ [ , ] ] wherein 

4 said terminal sends sending a request for said server to 

5 a gateway, wherein the security utilized between 

6 said terminal and said gateway is based on a first 

7 security protocol, said first security protocol 

8 including an encryption; 

9 wherein securing said server is — secured with a second 

10 security protocol, said second security protocol 

1 1 also including an encryption; and wherein 

12 the conversion converting between said first and said 

13 second security protocol is effected in a secured 

14 domain of said server administrated by an 

15 administrator, €ted wherein 

16 the encrypted packets sent by said terminal are routed by 

17 said gateway to said secured domain [[,] ] without 

18 said gateway decrypting all of the packets 

19 transmitted during a session. 



1 26. (new) A method for performing end-to-end secure data 

2 transfer between a terminal and a server, wherein said 
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terminal is connected to said server via a wireless connection 
between said terminal and a gateway, said method comprising 

5 the steps of: 

6 said terminal requesting a secure communication session 

7 with said server via said gateway, said requesting 

8 including the steps of : 

9 said terminal generating a request including request 

10 packets encrypted using a WTLS protocol, 

11 said terminal sending said request to said gateway, 

12 said gateway forwarding said request to said server 

13 or to another server, wherein said gateway does 

14 not decrypt all of said request packets, and 

15 said server or said another server decrypting some 

16 number of said request packets using said WTLS 

17 protocol; 

18 and 

19 said server or said another server serving data to said 

20 terminal via said gateway, said serving including 

21 the steps of: 

22 said server or said another server sending said data 

23 including data packets encrypted using said 

24 WTLS protocol to said gateway; 

25 said gateway forwarding said data packets to said 

26 terminal, wherein said gateway does not decrypt 

27 all of said data packets; and 

28 said terminal decrypting said data packets using 

29 said WTLS protocol- 



1 27. (new) The method of claim 26, wherein said gateway 

2 must decrypt some but not all of said request packets to 

3 forward said request to said server or said another server. 



4 28. (new) The method of claim 27, wherein said gateway 

5 must decrypt some but not all of said data packets to forward 
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1 29. (new) The method of claim 26, wherein a browser on 

2 said terminal provides information to said gateway for 

3 forwarding said request to said server or said another server 

4 without said gateway decrypting any of said request packets. 

1 30. (new) The method of claim 29, wherein said 

2 information includes one or more of: a port number, a domain 

3 name, and an URL. 

1 31. (new) A system for performing end-to-end secure data 

2 transfer between a terminal and a server, said system 

3 comprising: 

4 a gateway adapted for receiving a request for a secure 

5 session with said server from the terminal, wherein 

6 said request includes request packets encrypted 

7 using a WTLS protocol, and wherein said gateway is 

8 also adapted for forwarding said request to said 

9 server or to another server, wherein said gateway 

10 does not decrypt all of said request packets for 

11 performing said forwarding; 

12 said server or said another server adapted for decrypting 

13 some number of said request packets using said WTLS 

14 protocol and also adapted for serving data including 

15 data packets encrypted using said WTLS protocol to 

16 said gateway, wherein 

17 said gateway forwards said data to said terminal without 

18 decrypting all of said data packets, and wherein 

19 the terminal decrypts said data packets using said WTLS 

20 protocol . 

1 32. (new) The system of claim 31, wherein said gateway 

2 must decrypt some but not all of said request packets to 
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3 forward said request to said server or said another server. 



4 33* (new) The system of claim 32, wherein said gateway 

5 must decrypt some but not all of said data packets to forward 

6 said data to the terminal. 

1 34. (new) The system of claim 32, wherein a browser on 

2 the terminal provides information to said gateway for 

3 forwarding said request to said server or said another server 

4 without said gateway decrypting any of said request packets. 

1 35 (new) The system of claim 34, wherein said information 

2 includes one or more of a port number, a domain name, and an 

3 URL. 
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